# How delete the colon from source(hostname)

**URL:** <https://community.graylog.org/t/how-delete-the-colon-from-source-hostname/1998>\
**Category:** Graylog Central (peer support)\
**Created:** [August 8, 2017, 6:57am UTC](https://community.graylog.org/t/how-delete-the-colon-from-source-hostname/1998 "2017-08-08T06:57:24Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![xuziheng1002](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/xuziheng1002/32/446_2.png) [@xuziheng1002](https://community.graylog.org/u/xuziheng1002)\
**Post date:** [August 8, 2017, 6:57am UTC](https://community.graylog.org/t/how-delete-the-colon-from-source-hostname/1998/1 "2017-08-08T06:57:24Z")

</div>

I defined the logging config in Cisco Router ,and let it send syslog to Graylog-server whit it’s hostname

the source field should be a hostname in my inputs ,but it showshostname + “:” as below picture:

 ![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/1X/e3691ad5493b83a75db1785e3669f879b9d5a829.png)  
Maybe it’s caused by Cisco Router syslog format, so I think change the format is impossible.  
Could you tell me any other way?

---

<div class="post-metadata">

**Author:** ![jochen](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jochen/32/8_2.png) [@jochen](https://community.graylog.org/u/jochen)\
**Post date:** [August 8, 2017, 7:19am UTC](https://community.graylog.org/t/how-delete-the-colon-from-source-hostname/1998/2 "2017-08-08T07:19:27Z")

</div>

You can use a [Regex extractor](http://docs.graylog.org/en/2.3/pages/extractors.html) or the [`regex()`](http://docs.graylog.org/en/2.3/pages/pipelines/functions.html#regex) pipeline function to clean up the `source` field of your messages.

---

<div class="post-metadata">

**Author:** ![xuziheng1002](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/xuziheng1002/32/446_2.png) [@xuziheng1002](https://community.graylog.org/u/xuziheng1002)\
**Post date:** [August 8, 2017, 8:28am UTC](https://community.graylog.org/t/how-delete-the-colon-from-source-hostname/1998/3 "2017-08-08T08:28:29Z")

</div>

Hi,  
I create a Regex extractor as below then solved it,Thank you very much~!  
 ![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/1X/cf523e3880072348ba85b51fe86069c803f1f2b5.png)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [August 22, 2017, 8:28am UTC](https://community.graylog.org/t/how-delete-the-colon-from-source-hostname/1998/4 "2017-08-22T08:28:57Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.